This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft File: TStBlpVqQxU0D4J9mSoPeikoTD4.mft (raw, json) Hash identifier: g0799CfkvzmRBk7MWTen0DHtCBZitZkPqYE6hS3wFPs= Subject key identifier: 18:40:4A:CF:9C:20:DB:6F:8A:DF:18:6C:CE:25:C8:04:75:04:91:2B Authority key identifier: 4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E Certificate issuer: /CN=4d2b4196956a4315340f827d992a0f7a29284c3e Certificate serial: 019B5CAE34FBED3EB2F2AE2FC949C13CAC30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft Manifest number: 1428 Signing time: Fri 26 Dec 2025 22:01:19 +0000 Manifest this update: Fri 26 Dec 2025 22:01:19 +0000 Manifest next update: Sat 27 Dec 2025 22:01:19 +0000 Files and hashes: 1: TStBlpVqQxU0D4J9mSoPeikoTD4.crl (hash: EgFYjm8ks4QNkcFI4opB2md9PAueTbHjsN9ttW3sr+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:34:fb:ed:3e:b2:f2:ae:2f:c9:49:c1:3c:ac:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2b4196956a4315340f827d992a0f7a29284c3e Validity Not Before: Dec 26 22:01:19 2025 GMT Not After : Dec 27 22:01:19 2025 GMT Subject: CN=18404acf9c20db6f8adf186cce25c8047504912b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:34:b8:1a:c5:4a:90:aa:54:3e:51:62:75:09: 9b:3c:a4:14:ef:d4:2c:21:e2:b3:d8:5b:0d:65:aa: 94:55:fd:9e:b3:70:a9:1c:15:bf:96:fc:36:d6:88: b5:e7:a7:d2:97:26:67:1b:a0:3a:ed:af:db:26:e4: 2b:fd:48:40:0f:ba:f5:8e:fd:ed:39:f9:ad:31:65: 6b:a9:d9:17:7d:bb:e8:0a:02:83:78:aa:2b:8c:fd: 5c:38:ec:68:9e:0a:ce:3a:a0:7d:ae:cd:1e:60:5d: 81:c6:fa:41:08:e3:e6:0c:54:e1:56:5c:b4:25:cf: 2e:6c:c7:5c:1f:8b:de:a3:0f:fc:85:53:e0:00:a0: f3:8d:18:e4:1e:a8:ef:4c:42:dc:2a:e6:72:c9:16: a6:d8:19:67:34:34:48:66:09:ef:8b:ed:2c:ab:99: 74:81:55:bc:8f:48:df:9f:7f:1f:9d:79:97:19:ab: d3:95:e1:e7:e2:7f:ab:f2:ed:96:26:ce:48:3b:64: 0e:c5:53:f7:d7:39:b9:b6:d0:a9:71:1d:7a:2f:ef: 6c:52:b3:80:41:f9:c2:73:e0:b2:5d:2e:0a:45:12: 5c:d7:1d:24:b4:24:db:2d:fc:8b:61:10:9c:02:5d: 5f:d4:af:60:75:95:b9:d5:7f:ec:bd:80:a3:63:be: 58:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:40:4A:CF:9C:20:DB:6F:8A:DF:18:6C:CE:25:C8:04:75:04:91:2B X509v3 Authority Key Identifier: keyid:4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:91:bd:b9:e4:d6:29:8a:8d:f4:0b:74:a0:21:71:e1:49:6a: 3a:b5:d1:7e:a5:03:d9:95:fc:d9:3c:26:91:3f:d1:bb:cb:cc: fe:af:6a:cb:ef:7b:d9:1c:3a:5a:30:6c:71:0d:5e:e0:a9:f4: 7d:fe:14:0f:ad:bf:27:90:ee:d5:a9:14:ce:c5:d5:ae:0d:a7: 83:7b:60:27:7b:9d:6c:05:71:06:c5:f9:63:3e:42:e6:af:65: f8:23:37:cc:7c:08:51:0a:e1:fd:47:db:5d:18:f1:19:43:57: 87:22:80:93:3c:66:18:17:33:f2:1a:3d:58:c0:c3:a6:5a:ba: 44:52:8e:81:5c:33:8a:4e:1d:df:ad:d8:b2:9d:1d:69:e7:88: 13:00:20:21:19:86:98:57:0d:b7:5c:78:1c:68:c2:a8:20:87: 1e:32:1b:82:b4:0b:2a:79:68:c5:18:d4:e7:87:1a:c1:e7:07: 2a:2e:32:3b:5d:49:af:e4:60:7c:95:eb:6a:cc:18:51:67:98: 3c:76:6d:23:dc:2f:9d:9e:f8:41:18:f7:7e:16:75:08:39:0b: 04:6b:56:45:57:5c:eb:f7:9a:fa:aa:11:97:ad:f6:70:3b:4f: d9:8a:7f:61:cf:c4:de:56:95:5e:21:d2:0f:8b:28:6e:76:9e: 1b:ed:0a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrjT77T6y8q4vyUnBPKwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmI0MTk2OTU2YTQzMTUzNDBmODI3ZDk5MmEwZjdhMjky ODRjM2UwHhcNMjUxMjI2MjIwMTE5WhcNMjUxMjI3MjIwMTE5WjAzMTEwLwYDVQQD EygxODQwNGFjZjljMjBkYjZmOGFkZjE4NmNjZTI1YzgwNDc1MDQ5MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDS4GsVKkKpUPlFidQmbPKQU79Qs IeKz2FsNZaqUVf2es3CpHBW/lvw21oi156fSlyZnG6A67a/bJuQr/UhAD7r1jv3t OfmtMWVrqdkXfbvoCgKDeKorjP1cOOxongrOOqB9rs0eYF2BxvpBCOPmDFThVly0 Jc8ubMdcH4veow/8hVPgAKDzjRjkHqjvTELcKuZyyRam2BlnNDRIZgnvi+0sq5l0 gVW8j0jfn38fnXmXGavTleHn4n+r8u2WJs5IO2QOxVP31zm5ttCpcR16L+9sUrOA QfnCc+CyXS4KRRJc1x0ktCTbLfyLYRCcAl1f1K9gdZW51X/svYCjY75Y8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhASs+cINtvit8YbM4lyAR1BJErMB8GA1UdIwQY MBaAFE0rQZaVakMVNA+CfZkqD3opKEw+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFN0QmxwVnFReFUwRDRKOW1Tb1BlaWtvVEQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zYzAyYjktMjVjNC00ODhmLWE5NzUt NDU1YTBhNjFmMWVhLzEvVFN0QmxwVnFReFUwRDRKOW1Tb1BlaWtvVEQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zYzAyYjktMjVjNC00ODhmLWE5NzUtNDU1YTBhNjFmMWVh LzEvVFN0QmxwVnFReFUwRDRKOW1Tb1BlaWtvVEQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZG9ueTW KYqN9At0oCFx4UlqOrXRfqUD2ZX82TwmkT/Ru8vM/q9qy+972Rw6WjBscQ1e4Kn0 ff4UD62/J5Du1akUzsXVrg2ng3tgJ3udbAVxBsX5Yz5C5q9l+CM3zHwIUQrh/Ufb XRjxGUNXhyKAkzxmGBcz8ho9WMDDplq6RFKOgVwzik4d363Ysp0daeeIEwAgIRmG mFcNt1x4HGjCqCCHHjIbgrQLKnloxRjU54cawecHKi4yO11Jr+RgfJXraswYUWeY PHZtI9wvnZ74QRj3fhZ1CDkLBGtWRVdc6/ea+qoRl632cDtP2Yp/Yc/E3laVXiHS D4sobnaeG+0KPw== -----END CERTIFICATE-----Generated at Fri Dec 26 23:12:33 2025 by rpki-client